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Notation: 

• Tj = the maximum risk value of band i 
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r 3 = 1.0 



r 2 = 0.6 



r, = 0.2 



r 0 = 0 



|R| = 1+3 = 4 
i(max) = 2 



Security Score = r, (max) _, + 



' / (max) /'(max) -1 



r i{k) + r i(k)-\ 



/(max) 



+ r /(max) -1 k=l 



Note: 

Recognizing that the numerator (r., k) + r 
j(k)1 ) in the summation is constant for 
each band, and that 



n 



1 



= 2 -\ 

2 n 



Notatation: 

• i(max) = the index of the highest-risk 
band with at least one vulnerability 

• r ; = the risk value at the upper 
boundary of band i 

• i(k) = the index of the band that 
contains vulnerability k 

• |R| denotes the number of 
vulnerabilities on the host 



we can simplify the formula given above 
for computation purposes. The 
computations shown in subsequent 
figures implement the simplified method. 
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• b mirt = index of lowest-risk band 

• b i(max) = index of highest-risk band with at least 
one vulnerability 

• = the maximum risk value of band / 

• r M = the maximum risk value of band / - 1 



FIG. 10 



